last executing test programs: 96.293902ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (rerun: 64) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r0}, 0x18, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r0}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x34, 0x65, 0x29d55dc88c8bbabc, 0x35, 0x65, 0x32, 0x37], 0x2d, [0x65, 0x61, 0x34, 0x64], 0x2d, [0x36, 0x34, 0x33, 0x64], 0x2d, [0x0, 0x32, 0x32, 0x63], 0x2d, [0x39, 0x38, 0x30, 0x30, 0x38, 0x1, 0x34, 0x63]}}}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 83.007393ms ago: executing program 0 (id=1): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') fsetxattr$security_selinux(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000007c0)=[@enter_looper], 0x0, 0x0, 0x0}) 59.569525ms ago: executing program 1 (id=2): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') rt_sigtimedwait(&(0x7f0000000040)={[0x1ff]}, &(0x7f00000000c0), &(0x7f0000000140)={0x77359400}, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) unshare(0x22020600) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4.322479ms ago: executing program 2 (id=5): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) 3.691949ms ago: executing program 3 (id=4): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000004c0)={0xfffffffffffffde5, &(0x7f0000000680)=ANY=[@ANYBLOB="cc208fcf014b801b544000007c701a3665a82e7d2c4a888aed7d7716f3a1c60ba820c260b77b73feb55f3490d3bd155a521dbdb752b5273ebc0051c25364968b7e4d770fa3137b818dec2918b4903111111f3b136d8a4a4c8ab638420d4a9638c4a018054926a4e9961ba1", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16=r2, @ANYRESDEC=r0, @ANYBLOB="5d8a10963533add408d10ba3e1345d7419253a368fdc6fdeeb31a0feb88a93f3cb59ed1ee1ff0b3346bca1ba6c921a9eaf8ed4c295338dc24152d8d2cbb324ad9866e16c7c00fde509b17c2202bcbd9aceeb5271d9c4206831450a3f63a815d4151cb9978a866464f223dc3e52a54f1960d81d54e1060f1873d88e73f260c5e6fcc1f0c49a04b0c2f9f65d9869c268cae80c59fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x0, 0x13, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x80081270, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff8ad8, 0x79}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1800) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x3000000}, 0x90) r11 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=ANY=[], 0xffffffffffffff26}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000200), &(0x7f00000002c0)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000f95000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000600)="2e650f78c4c744240000000000c74424020f000000c7442406000000000f011c24b9d2020000b88f8e0000ba000000000f30b9240800000f32660f3882510cb98a0b00000f32c4e18a533066450f2043c461b1ec250000c0fef30f232a", 0x5d}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0xffffffffffffff5f, r5, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x1ffcc35c6ab96c2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f00000001c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 842.06µs ago: executing program 0 (id=6): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) keyctl$reject(0x13, 0x0, 0x9, 0x202, 0xfffffffffffffff9) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000001c0)={0x4, "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"}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6c38faa4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x85}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010000}, 0x20040000) 0s ago: executing program 2 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x4}, {0x4, 0x1}}, {{0x4, 0x1}, {0x2, 0x0, 0x1}}], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000940)=[{0x0}], 0x1) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x5, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x20, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4fba, 0x10000, 0x5}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 20.618081][ T36] audit: type=1400 audit(1754512585.940:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.619183][ T281] cgroup: Unknown subsys name 'net' [ 20.640940][ T36] audit: type=1400 audit(1754512585.940:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.668113][ T36] audit: type=1400 audit(1754512585.980:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.668299][ T281] cgroup: Unknown subsys name 'devices' [ 20.853160][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.858771][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.991751][ T36] audit: type=1400 audit(1754512586.320:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.014939][ T36] audit: type=1400 audit(1754512586.320:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.019508][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.039855][ T36] audit: type=1400 audit(1754512586.320:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.071384][ T36] audit: type=1400 audit(1754512586.380:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.092449][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.096812][ T36] audit: type=1400 audit(1754512586.380:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.131082][ T36] audit: type=1400 audit(1754512586.420:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.156635][ T36] audit: type=1400 audit(1754512586.420:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.435192][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.442286][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.449336][ T288] bridge_slave_0: entered allmulticast mode [ 22.455812][ T288] bridge_slave_0: entered promiscuous mode [ 22.462380][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.469431][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.476614][ T288] bridge_slave_1: entered allmulticast mode [ 22.482963][ T288] bridge_slave_1: entered promiscuous mode [ 22.522870][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.530008][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.537463][ T291] bridge_slave_0: entered allmulticast mode [ 22.543712][ T291] bridge_slave_0: entered promiscuous mode [ 22.556867][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.563952][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.571002][ T291] bridge_slave_1: entered allmulticast mode [ 22.577271][ T291] bridge_slave_1: entered promiscuous mode [ 22.605645][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.612772][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.619847][ T289] bridge_slave_0: entered allmulticast mode [ 22.626210][ T289] bridge_slave_0: entered promiscuous mode [ 22.634578][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.641646][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.648701][ T289] bridge_slave_1: entered allmulticast mode [ 22.655026][ T289] bridge_slave_1: entered promiscuous mode [ 22.694537][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.701635][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.708692][ T290] bridge_slave_0: entered allmulticast mode [ 22.715069][ T290] bridge_slave_0: entered promiscuous mode [ 22.727026][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.734338][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.741502][ T290] bridge_slave_1: entered allmulticast mode [ 22.747689][ T290] bridge_slave_1: entered promiscuous mode [ 22.837841][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.844924][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.878665][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.885750][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.893032][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.900051][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.935538][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.942650][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.949897][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.956933][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.972597][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.979652][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.986954][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.994019][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.002566][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.009879][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.017248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.024765][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.032236][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.039469][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.046821][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.059916][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.067002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.076764][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.083842][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.114752][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.121817][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.129316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.136376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.152386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.159447][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.173810][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.180855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.212410][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.219504][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.227329][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234396][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.252583][ T290] veth0_vlan: entered promiscuous mode [ 23.267131][ T289] veth0_vlan: entered promiscuous mode [ 23.273939][ T288] veth0_vlan: entered promiscuous mode [ 23.298338][ T288] veth1_macvtap: entered promiscuous mode [ 23.306672][ T290] veth1_macvtap: entered promiscuous mode [ 23.319383][ T289] veth1_macvtap: entered promiscuous mode [ 23.340818][ T291] veth0_vlan: entered promiscuous mode [ 23.366958][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.387975][ T291] veth1_macvtap: entered promiscuous mode [ 23.479117][ T345] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.503222][ T347] ------------[ cut here ]------------ [ 23.508758][ T347] WARNING: CPU: 1 PID: 347 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 23.518189][ T347] Modules linked in: [ 23.522159][ T347] CPU: 1 UID: 0 PID: 347 Comm: syz.2.7 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 23.535347][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 23.545550][ T347] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 23.551515][ T347] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 61 03 ee 05 00 0f 85 be 00 00 00 c6 05 54 03 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 23.571214][ T347] RSP: 0018:ffffc9000b97f680 EFLAGS: 00010246 [ 23.577309][ T347] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 23.585398][ T347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b97f738 [ 23.592459][ T351] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 23.593412][ T351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 23.593517][ T347] RBP: ffffc9000b97f7a8 R08: ffffc9000b97f737 R09: 0000000000000000 [ 23.602478][ T351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:8 [ 23.610900][ T347] R10: ffffc9000b97f720 R11: fffff5200172fee7 R12: ffffc9000b97f6c0 [ 23.636001][ T347] R13: dffffc0000000000 R14: 1ffff9200172fed4 R15: 0000000000000000 [ 23.644035][ T347] FS: 00007f52aeff76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.653004][ T347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.659602][ T347] CR2: 0000200000005000 CR3: 000000010d726000 CR4: 00000000003526b0 [ 23.667747][ T347] Call Trace: [ 23.671071][ T347] [ 23.674072][ T347] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 23.679812][ T347] ? kasan_save_alloc_info+0x40/0x50 [ 23.685141][ T347] ? __kasan_slab_alloc+0x73/0x90 [ 23.690184][ T347] ? hashtab_init+0xdb/0x1f0 [ 23.694841][ T347] ___kmalloc_large_node+0x9c/0x1d0 [ 23.700067][ T347] ? ebitmap_read+0x21d/0x990 [ 23.704824][ T347] ? hashtab_init+0xdb/0x1f0 [ 23.709519][ T347] __kmalloc_large_node_noprof+0x1e/0xe0 [ 23.715274][ T347] ? hashtab_init+0xdb/0x1f0 [ 23.719884][ T347] __kmalloc_noprof+0x26d/0x450 [ 23.724801][ T347] hashtab_init+0xdb/0x1f0 [ 23.729240][ T347] ? policydb_read+0x86f/0x28c0 [ 23.734254][ T347] symtab_init+0x44/0x70 [ 23.738521][ T347] policydb_read+0x8fe/0x28c0 [ 23.743306][ T347] ? kasan_save_alloc_info+0x40/0x50 [ 23.748709][ T347] ? __cfi_policydb_read+0x10/0x10 [ 23.753883][ T347] ? security_load_policy+0x128/0x12f0 [ 23.759359][ T347] security_load_policy+0x162/0x12f0 [ 23.764709][ T347] ? irqentry_exit+0x4a/0x60 [ 23.769312][ T347] ? exc_page_fault+0x66/0xc0 [ 23.774045][ T347] ? asm_exc_page_fault+0x2b/0x30 [ 23.779125][ T347] ? __cfi_security_load_policy+0x10/0x10 [ 23.784895][ T347] ? rep_movs_alternative+0x4a/0xa0 [ 23.790138][ T347] sel_write_load+0x298/0x5e0 [ 23.794943][ T347] ? __cfi_sel_write_load+0x10/0x10 [ 23.800150][ T347] ? vfs_writev+0xa16/0xcf0 [ 23.804713][ T347] ? bpf_lsm_file_permission+0xd/0x20 [ 23.810102][ T347] ? __cfi_sel_write_load+0x10/0x10 [ 23.815354][ T347] vfs_write+0x3c0/0xe80 [ 23.819632][ T347] ? __cfi_vfs_write+0x10/0x10 [ 23.824495][ T347] ? __kasan_check_write+0x18/0x20 [ 23.829630][ T347] ? mutex_lock+0x92/0x1c0 [ 23.834083][ T347] ? __cfi_mutex_lock+0x10/0x10 [ 23.838946][ T347] ? __fget_files+0x2c5/0x340 [ 23.843676][ T347] ksys_write+0x141/0x250 [ 23.848029][ T347] ? xfd_validate_state+0x68/0x150 [ 23.853182][ T347] ? __cfi_ksys_write+0x10/0x10 [ 23.858056][ T347] ? __kasan_check_write+0x18/0x20 [ 23.863223][ T347] ? fpregs_restore_userregs+0x11d/0x260 [ 23.868890][ T347] __x64_sys_write+0x7f/0x90 [ 23.873565][ T347] x64_sys_call+0x271c/0x2ee0 [ 23.878276][ T347] do_syscall_64+0x58/0xf0 [ 23.882749][ T347] ? clear_bhb_loop+0x50/0xa0 [ 23.887446][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.893394][ T347] RIP: 0033:0x7f52b098ebe9 [ 23.897830][ T347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 23.917578][ T347] RSP: 002b:00007f52aeff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 23.926116][ T347] RAX: ffffffffffffffda RBX: 00007f52b0bb5fa0 RCX: 00007f52b098ebe9 [ 23.934175][ T347] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000004 [ 23.942194][ T347] RBP: 00007f52b0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 23.950192][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.958207][ T347] R13: 00007f52b0bb6038 R14: 00007f52b0bb5fa0 R15: 00007fff5a14f778 [ 23.966223][ T347] [ 23.969256][ T347] ---[ end trace 0000000000000000 ]--- [ 23.975025][ T347] SELinux: failed to load policy [ 24.111261][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.261282][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 24.267691][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 24.276472][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.286584][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.297011][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.306638][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.314810][ T31] usb 4-1: Product: syz [ 24.318967][ T31] usb 4-1: Manufacturer: syz [ 24.323621][ T31] usb 4-1: SerialNumber: syz [ 24.731060][ T31] usb 4-1: 0:2 : does not exist [ 26.514795][ T31] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 26.531389][ T31] usb 4-1: USB disconnect, device number 2 [ 26.544576][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory